The Keystone hardware-wallet breach: buyer records and order details taken from the wallet maker’s store, then a device-authentication key exposed and 18,835 unsold wallets marked for destruction.
Latest: Keystone update: breach exposed 25,964 buyer records and a device-authentication key — 18,835 unsold wallets to be destroyed (disclosed 2026-10-26)
Keystone said its website breach exposed 25,964 buyer records and the WebAuth key used to verify its devices, so it will destroy 18,835 unsold devices, suspend shipments, and direct customers who received a device after October 20 to seek extra verification.
Keystone said a third party obtained customer names, contact details, shipping addresses and order details from its official website store; payment details, recovery phrases and private keys were not involved.